Summary
[2:2.11.7-3]
- Backport several CVE fixes
Resolves: RHEL-148825, RHEL-148865, RHEL-148982
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | freerdp | 2:2.11.7-3.el8_10 |
| Oracle Linux · 8 | freerdp-devel | 2:2.11.7-3.el8_10 |
| Oracle Linux · 8 | freerdp-libs | 2:2.11.7-3.el8_10 |
| Oracle Linux · 8 | libwinpr | 2:2.11.7-3.el8_10 |
| Oracle Linux · 8 | libwinpr-devel | 2:2.11.7-3.el8_10 |
Vulnerabilities 3
-
Medium 5.6
FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
-
Medium 5.6
FreeRDP has a global-buffer-overflow in crypto_base64_decode
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is …
-
Medium 5.6
FreeRDP has a heap-buffer-overflow in urb_select_configuration
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing …